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, v.A » United States Department of State 
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September 18, 1985 


ffhshington, D.C. 20520 


3DCRET/ N0F0RN 

MEMORANDUM 


TO: Vice Admiral E. A. Burkhalter, Jr. 

Director 

Intelligence Community Staff 

SUBJECT: Computet Security: Correction of INR IBS Vulnerabilities 

REFERENCE: Your Memo DCI/ICS 85-4092 

In response your memorandum which notified us of your much 
appreciated decision to transfer $250,000 to the Department as the 
basis for immediate action to correct the potential security 
problems of the INR Information Handling System (IBS), a series of 
staff level meetings, within the Department and with community 
participation, have been held. The goal of these meetings was to 
identify the most expeditious and prudent means of severing the 
connection between the INR DEC PDF 11/70 system and the 
Department's classified collateral IBM 3083 system. We were guided 
in this effort, in part, by a study of the problem prepared by J.G. 
Van Dyke Associates, Inc. which has been provided to your staff. 

At a meeting, held September 12 with representatives of your 
staff, CIA and NSA, certain specific vulnerability issues were 
addressed: 

The issues discussed were: 


Such material does not enter the INR retrievel system and, 
therefore, could not be compromised in this fashion. 

B. The possibility of compromise in processing of National 
Security Agency Special Compartmented Intelligence 
messages for profiling purposes: 

Previously, a limited amount of SIGINT message externals, 
i.e., the DTG, the serial reference number (SRN) 
precedence, compartment, classification, location in the 
INR system and the TAGS lines(^ not text material^ could 
have been available in the^system on a temporary and 
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random basis. To clear up this situation, it was agreed 
that INR would make immediate software changes so that 
nothing but TAGS lines, SRN, and location would be entered 
in the system. These changes have been accomplished. 

C. The possiblity of "spillage" of NSA SCI material from the 
INR system to the state Department's collateral system and 
what action should be taken to prevent it: 




1U 
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Because another community system based on DEC PDF 11/70 
architecture with a configuration similar to that of INR 
IBS had "spillages", there is concern about the continued 
operation of the INR IBS in its present mode. We have 
developed a plan for an expeditious severing of the link 
between the INR IBS and the Department's IBM system. 

Though some new hardware is involved, the severance plan 
itself is "hardware independent", that is, the software 
that is being written will run on our current 11/70 
hardware. Though the Department's official position on 
the timing of the disconnect project remains as outlined 
in Van .nyitP g<-n«iY,r INR Staff personnel familiar with 

’'sys^ms involved believe that the disconnect can be 
accomplished in approximately three months. A more 
detailed discussion of the disconnect plan and the 
utilization of the $250,000 is provided below. A separate 
technical working paper and copies of procurement 
documents are provided as attachments. 


The end result, as you know, will be to cut the connection 
between the INR and Department computers. 


The programming team, as defined in the or 
studied by Van Dyke, included INR employee Jim 
currently under contract to INR, and Mike Moor 
the Project Leader. In order to speeds the^^pro 
enhanced by adding Barry Norman and^ne other 
DEC. ^ 


iginal plan that was 
Walker, Don Ball, 
e of DEC, who will be 
jec t, it^ will be 
programme^, both from 

/t'r-JU. 


The proposed team's familiarity with what 
awareness of the system design are essential e 
the timing of the disconnect. If we can't get 
(particularly Mike Moore of DEC,), it will put 
efforts to speed up the disconnect. If DEC gives us another 


needs to be done and ^ 

laments underlying 
the personnel 
a crimp in our 
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capable programmer, we could still get the job done by the original 
target date of April 1, but his presence on the project, in the 
view of technical people, is essential to the speed to which I am 
committed. In these circumstances, any limitaion on electrical 
distribution would be counterproductive; the loss of timely 
intelligence to the Department of Stafe would far outweigh what is, 
after all, a theoretical risk of spillage. 


Thank you very much for your personal support and that of your 


staff . 




e^/l 

ipal Deputy Assistant 
retary 

reau of Intelligence and Research 


ILLEGIB 


SECRET/NOFORN 


Sanitized Copy Approved for Release 2011/03/03 : CIA-RDP89B01354R0001 001 70039-1 




Sanitized Copy Approved for Release 2011/03/03 : CIA-RDP89B01354R0001 001 70039-1 


Drafter; 



INR/EX ; PDGutensohn 
X22084 


Clearances; INR/EX - RAMacCalJ^ip 
INR/IS - VJFazj^^^ 
A/ISO - DOMountyVx 
A/ISS - FLMcNulty^^ 
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A brief explanation of our disconnect game plan is as follows: 

The functionality of commands available for the analyst to 
interact with his workfile will be minimized to three commands 
in the initial profiling package, thus cutting the time to 
disconnect. Full capability will be restored after the initial 
task is completed. 

It has been determined that a task being developed earlier 
for a reformatting capability can be modified to provide one 
half of the functionality of the profiling task PO. This 
should provide a time saving. 

The RCV task will not be changed until after the disconnect 

The filtering capability necessary for future full use will 
occur after the disconnect. 

The TAG records that are being transmitted to the IBM 
machine have been reduced to contain only the necessary 
information; SRN, TAGS, and starting and ending UBV. A display 
of each TAG record as developed by the text analyzers is being 
printed for each message to provide an audit capability. This 
will continue as an operational procedure until there is no 
linkage with the IBM equipment. 

The Project Leader, Mike Moore, has planned the development 
effort and made the following division of labor: 

Moore will complete the SYS-GEN of the new operating 
system. Following the generation of the operating system, he 
will modify the device drivers that are peculiar to this site. 
The DV II driver will be modified and the now peculiar XL 
driver will be normalized. Project direction and technical 
choices for other tasks will be done by Mike to give priority 
to the object of disconnecting from the IBM. 

/ 

— Dan Hall will modify the test analyzer to create TAG to TAG 
ID number correspondence. The conversion of the reformatting 
task TC to handle the profile to TAG packet juxapositioning 
will be developed in this task. 

The creation of the work files file will be done by Barry 
Norman to create the limited treatment of three commands 
intially, and full capability later. Barry will also modify 
the task AS to route the commands to the appropriate module. 

— Jim Walker will develop the method to insert profiles into 
the system manually by the programming staff initially and 
through the use interfact in the final capability. 
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— The fifth programmer will develop the roll over mechanism I 
which will provide the New Day files and rename the Past Days j 
Files to allow the user's file to have a current day and five^ 
previous days records of hits against his profiles. 


Digital Equipment corporation salesman, Tony Byrd has 
rushed the order of VT200 CRT displays which will also aid in 
the development effort. 
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DIGITAL EQUIPMENT CORPORATION 


U.S. DEPT OF STATE 
WASHINGTON, D.C. 


R0001 001 70039-1 


DATE 


PLEASE REFER TO THIS QUOTATION IN 
ALL COHRESKINDENCE AND ORDERS ' 


ATTN; DONALD HALL 


PRO 380 HARDWARE 


LINE# 

QTY 

PART# 

DESCRIPTION 

DISC 

MAINT 

UNIT 

PRICE 

TOTAL 

PRICE 

1 

2 

RF-PCXXF-AA 

EMI FLOORSTAND 

FOR 300 SERIES 

NON-GSA 

F/S 

2,325. 

4,650. 

2 

2 

RF-VR201-A 

BLACK AND WHITE 

EMI MONITOR 

NON-GSA 

13 

1,200. 

2,400. 

3 

2 

RF-PC3K1-AA 

EMI KEYBOARD WITH 
COUNTRY KIT 

NON-GSA 

7 

445. 

890. 

4 

2 

PC-380-AA 

PRO 380 SYSTEM 18% 

UNIT WITH 512K 

BYTES MEMORY & DUAL 

DRIVE FLOPPIES 

F/S 

6,025. 

9,881. 

5 

2 

MSCll-B 

512K BYTES MEMORY 

18% 

F/S 

1,595. 

2,615.80 

6 

2 

RCD52-A 

33MB WINCHESTER 

18% 

26 

3,995. 

6,551.80 

7 

2 

PC3XC-BA 

quad serial LINE 

NON-GSA 

7 

495. 

990.00 

8 

2 

BC18A-50 

HOST COMMUNICATIONS 4% 

r A D 1 C C 

N/A 

490. 

940.80 




V nu u U O 


NET TOTAL $28,919.40 




PRO 380 SOFTWARE 




11 

2 

QBA02-H3 

PROFESSIONAL 380 
OPERATING SYSTEM 

4% 

N/A 

300. 

576. 

12 

1 

QBA14-A3 

PRO/TOOL KIT 

18% 

N/A 

520. 

426.40 

13 

1 

QBA71-A3 

PRO/RDT VI. 0 

18% 

N/A 

495. 

405.90 


£XPO«T OF THISE PRODUCTS REQUIRES PRK5R WRIHEN AUTHORIZATION FROM THE U.S. DEPARTMENT OF COMMERCE. 
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DATE 


PLEASE REFER TO THIS QUOTATION IN 
ALL CORRESPONDENCE AND ORDERS 



14 

1 

QBA05-A3 

PRO COMMUNICATIONS 

18% 

N/A 

195. 

159.90 

15 

1 

QBA64-A3 

PRO/OFFICE WORK- 
STATION 

18% 

25 

950. 

779.00 

16 

1 

QA176-C3 

PRO PRISM 

18% 

N/A 

595. 

487.90 

17 

1 

QBA43-A3 

PRO DATATRIEVE 

18% 

N/A 

495. 

405.90 


NET 

TOTAL 

$2,665.00 


IXPORT Of THISt PRODUCTS REQUIRES PRIOR WRITTEN AUTHORIZATION fROM THE U S. DEPARTMENT Of COMMERCE. 
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DIGITAL EQUIPMENT CORPORATION 


DATE 


PLEASE REFER TO THIS QUOTATION IN* 
ALL CORRESPONDENCE AND ORDERS 


U.S. DEPT OF STATE 

2201 C ST NW 

WASHINGTON, D.C. 

ATTN: DONALD HALL/INR 

FROM 

: ANTHONY T. BYRD 

8301 PROFESSIONAL PL 
LANDOVER, MD. 20785 



INR 11/84 

HARDWARE 




LINE# 

QTY PART# 

DESCRIPTION 

DISC 

MAINT 

UNIT 

PRICE 

TOTAL 

PRICE 

1 

2 RUA60-DA 

205MB RACK MOUNT 
DISK DRIVE IN AN 
H9642 CABINET 

WITH UDA50 CTRL 

18% 

131 

24,000. 

39,360. 

2 

4 RA81-AA 

456MB DISK DRIVE 
RACK MOUNT 

18% 

113 

19,000. 

62,320. 

3 

1 DZll-M 

8 LINE EIA MUX 

18% 

39 

1,560. 

1,279.20 

4 

1 CK-DZll-CK 

DZll CABINET KIT 

18% 

N/A 

615. 

504.30 

5 

3 VT220-A 

ALPHANUMERIC TERMI 

NAL 27% 

7 

1,180. 

2,584.20 

6 

3 VT22K-AA 

VT220 KEYBOARD 

27% 

4 

215. 

470.85 

7 

3 BC22D-25 

NULL MODEM CABLES 

N/A 

N/A 

48. 

144.00 

8 

2 BC26V-12 

RA DRIVE CABLES 

4% 

N/A 

360. 

691.20 

9 

1 QR500-UZ 

RSXllMPLUS Lie 

18% 

74 

3,000. 

2,460.00 

10 

1 QJ071-UZ 

PRO HOST TOOL KIT 

18% 

85 

800 

656.00 

11 

1 QJ071-AM 

PRO HOST TOOL KIT 

N/A 

N/A 

600. 

600.00 


INSTALLATION RUA60 .$1320. 

RA81 $3200. 

DZll $ 323. 


NET TOTAL $110,413.35 


I XPORT Of mst PRODUCTS REQUIRES PRIOR WRIHEN AUTHORIZATION FROM THE U.S. DEPARTMENT OF COMMERCE. 
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DIGITAL E^UIFVIENT CORPORATION 


V1BER 


DATE 


PLEASE REFER TO THIS QUOTATION \Hv 
ALL CORRESPONDENCE AND ORDERS 


12 


13 


SOFTWARE RESIDENT SUPPORT 

QS740-SZ SOFTWARE ENGINEER 

N/A 


$42,720 

QS840-SZ 

SOFTWARE ENGINEER 

N/A 


55,200 


PROJECT LEADER 
0::TtQHTIK 


TOTAL 

$97,920 


THE ABOVE OPTIONS ARE QUOTED AGAINST GSA SCHEDULE GS00K8501S5933 WITH 
THE EXCEPTIONS OF LINE ITEMS NUBMER 7 , 12 , AND 13. THESE ITEMS ARE 
QUOTED OPEN MARKET WITH GSA TERMS AND CONDITIONS. 


REGARDS 


ANTHONY BYRD 

DIGITAL EQUIPMENT CORPORATION 
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